`verification/gracie-rollout/independent-runtime.json`

261 lines
{
  "task": "TK-11438",
  "owner": "codex-run-11438-verifier",
  "at": "2026-09-11T20:23:15.787Z",
  "checks": [
    {
      "name": "Exact Gracie online after one restart",
      "verdict": "PASS",
      "data": {
        "pid": 91857,
        "restarts": 2
      }
    },
    {
      "name": "Effective/saved socket fields and unchanged auth/data/port controls",
      "verdict": "PASS",
      "data": true
    },
    {
      "name": "Reviewed source hashes, privacy rollback copies and catalog bundle",
      "verdict": "PASS",
      "data": true
    },
    {
      "name": "Only 127.0.0.1:10073 listener and no TCP5432",
      "verdict": "PASS",
      "data": [
        "node    91857 macstudio3   15u  IPv4 0x31f9c8265db2c7e5      0t0  TCP 127.0.0.1:10073 (LISTEN)"
      ]
    },
    {
      "name": "All nonloopback IPv4 plus IPv6 loopback reject 10073",
      "verdict": "PASS",
      "data": [
        {
          "host": "169.254.166.245",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "169.254.223.128",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "192.168.1.151",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "192.168.1.134",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "169.254.169.117",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "169.254.2.38",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "100.82.17.107",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "169.254.128.95",
          "connected": false,
          "code": "ECONNREFUSED"
        },
        {
          "host": "::1",
          "connected": false,
          "code": "ECONNREFUSED"
        }
      ]
    },
    {
      "name": "/healthz missing",
      "verdict": "PASS",
      "data": {
        "status": 200,
        "body_sha256": "4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93",
        "bytes": 11
      }
    },
    {
      "name": "/healthz invalid",
      "verdict": "PASS",
      "data": {
        "status": 200,
        "body_sha256": "4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93",
        "bytes": 11
      }
    },
    {
      "name": "/healthz valid",
      "verdict": "PASS",
      "data": {
        "status": 200,
        "body_sha256": "4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93",
        "bytes": 11
      }
    },
    {
      "name": "/api/products missing",
      "verdict": "PASS",
      "data": {
        "status": 401,
        "body_sha256": "45cceda8377a0f8cfb7a5dc927ee1760c648406764291c2032cbadad6e8e44fb",
        "bytes": 24
      }
    },
    {
      "name": "/api/products invalid",
      "verdict": "PASS",
      "data": {
        "status": 401,
        "body_sha256": "45cceda8377a0f8cfb7a5dc927ee1760c648406764291c2032cbadad6e8e44fb",
        "bytes": 24
      }
    },
    {
      "name": "/api/products valid",
      "verdict": "PASS",
      "data": {
        "status": 200,
        "body_sha256": "b01acb69f4bd1d7d3c64d4dead18b84cf7f7026e9a702a2e9a77b08f66940264",
        "bytes": 188603
      }
    },
    {
      "name": "/api/requests missing",
      "verdict": "PASS",
      "data": {
        "status": 401,
        "body_sha256": "45cceda8377a0f8cfb7a5dc927ee1760c648406764291c2032cbadad6e8e44fb",
        "bytes": 24
      }
    },
    {
      "name": "/api/requests invalid",
      "verdict": "PASS",
      "data": {
        "status": 401,
        "body_sha256": "45cceda8377a0f8cfb7a5dc927ee1760c648406764291c2032cbadad6e8e44fb",
        "bytes": 24
      }
    },
    {
      "name": "/api/requests valid",
      "verdict": "PASS",
      "data": {
        "status": 200,
        "body_sha256": "4682017fdbc8ce5539bc7e44ef687440bfae054688ac409c289284cde01204c6",
        "bytes": 197
      }
    },
    {
      "name": "Vendor socket identity and unchanged records/schema/indexes",
      "verdict": "PASS",
      "data": {
        "identity": {
          "database": "dw_unified",
          "role": "dw_admin",
          "addr": null,
          "readonly": "on",
          "database_oid": 16391,
          "server_started": "2026-09-09T15:05:54.745Z"
        },
        "requests": {
          "count": 1,
          "last_id": "7"
        }
      }
    },
    {
      "name": "Catalog effective socket identity",
      "verdict": "PASS",
      "data": {
        "database": "dw_unified",
        "role": "macstudio3",
        "addr": null,
        "readonly": "on"
      }
    },
    {
      "name": "Catalog saved socket identity",
      "verdict": "PASS",
      "data": {
        "database": "dw_unified",
        "role": "macstudio3",
        "addr": null,
        "readonly": "on"
      }
    },
    {
      "name": "vendor missing socket fails closed",
      "verdict": "PASS",
      "data": "ENOENT"
    },
    {
      "name": "catalog missing socket fails closed",
      "verdict": "PASS",
      "data": "ENOENT"
    },
    {
      "name": "Gracie owns Unix sockets",
      "verdict": "PASS",
      "data": {
        "sha256": "186d9138e3b39fdf9897972970dd6b59a879e618554eea291fc3a66aaa28381b",
        "rows": 5
      }
    },
    {
      "name": "Process stable throughout verification",
      "verdict": "PASS",
      "data": true
    },
    {
      "name": "Commit changes exactly three lines across two scoped files",
      "verdict": "PASS",
      "data": {
        "commit": "966130377ec694055a0688d0e1bd7f4bdf454a93",
        "numstat": "1\t1\tlib/vendor-requests.js\n2\t2\tserver.js"
      }
    }
  ],
  "application_mutations": 0,
  "email_sends": 0,
  "pid": 91857,
  "commit": "966130377ec694055a0688d0e1bd7f4bdf454a93",
  "verdict": "PASS",
  "status": "complete_scoped_verification",
  "scope_limits": [
    "17 local proxy configs and 4 running proxy/tunnel processes inspected before rollout; remote/cloud-managed routes unqueried",
    "Catalog currently uses unchanged JSONL; configured PG URI independently connected",
    "Only GET routes after confirmed startup DDL; no POST or emails"
  ],
  "commands": [
    "Direct existing PM2 monitor RPC before/after",
    "lsof process TCP/Unix",
    "TCP connect all nonloopback IPv4 and ::1",
    "9 loopback GET auth checks",
    "Read-only PostgreSQL identity/count/schema/index queries",
    "Source/rollback-copy/catalog bundle SHA256",
    "git rev-parse and show --numstat"
  ],
  "execution_provenance": {
    "checker": "/tmp/tk11438-gracie-approved/independent-check.cjs",
    "authored_and_reviewed_by": "codex-run-11438-verifier",
    "executed_by": "parent through scoped host approval",
    "final_artifact_independently_inspected_at": "2026-09-11T20:23:52.883501+00:00",
    "initial_verifier_failure": "independent-runtime-firstfailure.json; filename typo fixed, no application regression"
  }
}